Agent wiped production DB in 9 seconds — dev says keep humans in CD loop

Pavan_Belagatti · x · 2026-11-09

Citing a PocketOS incident from April 2026 where an AI agent deleted the company's production database and backups in nine seconds without human approval, developer Pavan Belagatti argues that coding, code review, and CI can be automated, but continuous deployment should never be fully automated. His illustrated pipeline keeps humans at strategic gates: triage and investigation agents run auto-approved, the coding agent's patch PR needs engineer approval, progressive rollout goes 5% → 25% → health check → human approval → 100% with auto-rollback on failure, and the incident closed with p95 latency down from 800ms to 310ms.

Original post →

More from coding & agent

coding & agent channel →